Enterprise Risk Officer at PayFast

What you'll be doing

• Facilitate the implementation and updating of the Group’s Enterprise Risk Management and Operational Risk Management Frameworks and Programmes.
• Point of contact with Business and Support functions in facilitating and promoting the understanding of operational risk and governance matters; to implement a sound operational risk management framework.
• Support the risk owners and champions in conducting Risk Assessments (RA) of business and support units and for projects, changes or initiatives.
• Support the risk owners and champions to ensure that Risk and Control Self-Assessment (RCSA) reviews are appropriately and timely completed by the business and support units.
• Roll out of the RCSA process across the organisation and expand the risk identification and monitoring program.
• Perform process mapping exercise for key operational processes to support RCSA and control monitoring.
• Review standard operating procedures and process notes to identify procedural risks and recommend compensating controls.
• Providing and facilitating operational risk training and awareness to staff across the Group.
• Develop training materials on operational risk issues to enhance understanding on operational risk issues among the staff and conduct periodic training sessions and workshops.
• Second line of defence oversight of the business and functional units for the execution of BCM, testing exercise and assurance.
• Facilitate the implementation and updating of the Group Business Continuity Management (BCM) Policy, Group BCM Framework and Programme.
• Providing and facilitating BCM training and awareness to colleagues across the organisation
• Develop and maintain a crisis management plan to respond to disruptive events

What you'll need

• Relevant Bachelor’s degree in either Commerce / Risk Management / Information Technology
• Minimum 5 years’ experience in banking, financial services or payment services. Exposure to banking operations, payments, card operations, merchant acquiring operations with reasonable experience in process management, MIS and data analysis.
• Ability to interact with business unit managers and executives regarding mitigation plans, strategies, and progress towards recovery goals, contingency plans, and planning activities.
• Certifications in Risk Management / Technology Risk / CRISC will be added advantage.
• Good understanding of Operational Risk Tools like RCSA / KRI / Loss Data Management / Internal Controls.
• Good understanding of global risk management standards e.g., ISO 31000; 22301.
• Should have strong communication and negotiation skills, as well as solid presentation skills.
• Strong interpersonal skills used within a team environment.
• Pro-active and self-starter who can work with limited supervision.